
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
theoddsapi-mcp
Advanced tools
MCP server for The Odds API: sports, events, betting odds. Free key.
Pairs well with espn-core-mcp, mlb-mcp, and nhl-mcp.
Get a key at https://the-odds-api.com/ (free, 500 calls/month), then:
export THEODDS_API_KEY=your_key_here
npm install
npm run build
node dist/index.js
The server uses stdio, so it can be connected to Claude Desktop, Cursor, VS Code, MCP Inspector, or another compatible MCP client.
list_sports: Sports and leagues with API keys (soccer_epl, americanfootball_nfl...).game_odds: Upcoming games with bookmaker moneyline odds.This project is intentionally narrow. It should be treated as a practical helper, not a complete certification or security audit. Check the implementation and the returned data before using it with sensitive material. Your key stays local and is only sent to The Odds API. Read-only. Odds are informational, not betting advice.
Every tool in this package is free: no licence key, no paid tier, no hosted gateway. Everything runs locally.
FAQs
MCP server for The Odds API: sports, events, betting odds. Free key.
The npm package theoddsapi-mcp receives a total of 120 weekly downloads. As such, theoddsapi-mcp popularity was classified as not popular.
We found that theoddsapi-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.